This vulnerability (CVE-2024-7872) in ExtremePACS Extreme XDS allows an attacker to retrieve sensitive information that has been inserted into sent data streams. The issue is classified under CWE-201 (Insertion of Sensitive Information Into Sent Data). It affects versions before 3933 of Extreme XDS. The CVSS 3.1 vector indicates the attack requires adjacent network access, no privileges or user interaction, and impacts confidentiality (high), integrity (low), and availability (low). No patch or official remediation level has been disclosed yet.

Successful exploitation could lead to unauthorized disclosure of sensitive information embedded in data sent by the affected product. The confidentiality impact is high, meaning sensitive data exposure is significant. Integrity and availability impacts are low, indicating limited effect on data modification or service disruption. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should monitor vendor communications for updates. No specific mitigations or workarounds have been provided by the vendor at this time.